Detectbox Audit Reports
Kunji Finance Security Audit Report
Post Audit Conclusion

POST AUDIT CONCLUSION

Fixing the Findings

Sl. No.NameStatus
M-01Chainlink Sequencer Uptime Check Not Implemented ProperlyFixed
M-02Unsafe ERC20 Transfer Function UsageFixed
M-03Use call instead of Transfer for address payableFixed
M-04The owner is a single point of failure and a centralization riskAcknowledged
M-05Non-Upgradable OpenZeppelin Contracts Used in Upgradeable ContractsFixed
M-06Missing Access control in emergencyClose() functionAcknowledged
L-01No logic is implemented to handle profit in rollover functionAcknowledged
L-02Natspec is missingAcknowledged
L-03Missing Zero-Address Check in setGmxObserver() FunctionFixed
L-04NO error or revert in claim function if claimFixed
L-05Avoid the use Of Floating PragmaAcknowledged
L-06Consider implementing two-step procedure for updating protocol addressesAcknowledged
L-07Unused receive() function will lock Ether in contractAcknowledged
L-08Use Ownable2StepUpgradable rather than OwnableReadableFixed
1-01Removal Of Commented-Out Code for Better Code QualityAcknowledged
1-02Open TODOsAcknowledged
1-03Variable names don't follow the Solidity style guideAcknowledged
1-04Using unnamed mappingsAcknowledged
1-05Consider adding emergency-stop functionalityAcknowledged
1-06Imports could be organized more systematicallyAcknowledged
1-07Event is not properly indexedAcknowledged
1-08TyposFixed
G-01Explicitly initializing variables with their default values wastes gasFixed
G-02Use assembly to check for address(0)Acknowledged
G-03Caching the array length outside a loopFixed
G-04Redundant zero-address check in the removeTrader() functionFixed